CN102439905B

CN102439905B - Method, device and system of finding network topology automatically

Info

Publication number: CN102439905B
Application number: CN201180002342.1A
Authority: CN
Inventors: 李�浩; 袁学文
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Cloud Computing Technologies Co Ltd
Priority date: 2011-09-30
Filing date: 2011-09-30
Publication date: 2014-02-19
Anticipated expiration: 2031-09-30
Also published as: CN102439905A; WO2012149794A1

Abstract

The invention provides a method, a device and a system of finding a network topology automatically, wherein, ,the method comprises the steps of using a network topology automatic finding terminal agent to obtain the network type of an IP message; if the network type of the IP message is a straight connection network, carrying out a request immediate response detection on a purpose IP address of the IP message to obtain a first detection result; if the network type of the IP message is a route network, carrying out a route detection on the purpose IP address of the IP message to obtain the IP address of a router between a local end and an opposite end; carrying out request immediate response detections on the IP address of the router and the purpose address of the IP message respectively to obtain a second detection result; reporting the first and second detection results to a network topology finding analysis server to making the network topology finding analysis server draw a network topology picture after the network topology finding analysis server receives the first detection result or the second detection result.

Description

Automatic topology discovery method, Apparatus and system

Technical field

The embodiment of the present invention relates to network management technology field, relates in particular to automatic topology discovery method, Apparatus and system.

Background technology

The main purpose of discovering network topology be acquiring and maintaining network node there is information and the connection relation information between them, and draw out on this basis whole network topological diagram.Network management personnel can locate fast malfunctioning node on the basis of network topological diagram.

In prior art, exist a kind of based on Simple Network Management Protocol (SNMP, the method of automatic topology discovery Simple Network Management Protocol), first by default gateway router, obtain the subnet list of existence, then traversal is specified all vehicular equipments in subnet, Bing Yong system group's name storehouse goes for group's name of equipment, if found, with snmp protocol, obtain the essential information of equipment, and judge the type (can be router or switch or fire compartment wall or main frame etc. such as device type) of equipment, and obtain on this basis the details of relevant device.If do not find group's name of equipment, giving tacit consent to this equipment is main frame.

The method of the automatic topology discovery based on SNMP finds the mode of the routing gateway of acquiescence to be: search the ipRouteTable in the SNMP MIBII of Topology Discovery program place computer, if find the record that ipRouteDest value is 0.0.0.0, illustrate Topology Discovery program place computer installation default gateway, ipRouteNextHop value is the address of default gateway.Then check the ipForwarding value of default gateway, if 1, show that this default gateway is routing device really, otherwise be not.

The mode that the method for the automatic topology discovery based on SNMP is obtained the subnet list of existence is: all objects in the IP management group of traversal router mib II under management object ipRouteDest, take each route object network number is index, the value of inquiry ipRouteType field.If this value is 3 to be indicated as direct route, if this value is 4, be indirect route.Indirect route shows to lead to object network or destination host also will pass through other router, and directly route shows to be directly connected with object network or destination host, so just can obtain the network number being directly connected with router.Again according to its route mask (ipRouteMask) of every record queries in network number.According to the route mask of obtaining, just can determine the IP address range of the network subnet of each existence.

The method of the automatic topology discovery based on SNMP finds that the mode of other routing device is: search the route table items that in the IP management group routing table of default route gateway MIBII, type is indirect route, obtain the next hop address (ipRouteNextHop) of route.The routing device that traversal next hop address provides, just can obtain larger network topology.

The mode of the annexation of the method discovering network layer equipment of the automatic topology discovery based on SNMP is: the annexation of subnet and router travels through the subnet comprising under each router to be determined, the relation of main frame and subnet can be determined by host ip and subnet mask.

The present inventor at least has following defect find prior art in realizing process of the present invention in:

1, the method for the automatic topology discovery based on SNMP has particular arrangement requirement to router, router need to be supported the SNMP MIB storehouse of query routing list item, and require Topology Discovery program to know the structure of this MIB, exist system incompatibility, cause this scheme versatility not strong;

2, the method for the automatic topology discovery based on SNMP need to be opened SNMP query interface, but router in the network of reality may not open, because router is a lot, all opens and may be difficult to realize, and causes this scheme versatility not strong;

3, the method for the automatic topology discovery based on SNMP is used SNMP need to know the SNMP password of router, and open like this these router passwords are very large on the impact of internet security, have larger security risk.

Summary of the invention

The embodiment of the present invention provides automatic topology discovery method, Apparatus and system, and not needing provides particular arrangement to the network equipment, can be applicable to various network device, automatically finds the network topology structure of IP system, highly versatile.

On the one hand, the automatic topology discovery method that the embodiment of the present invention provides, comprising:

Automatic topology discovery proxy module obtains the network type of interconnection agreement IP message between net, described network type comprises directly-connected network or route network, described directly-connected network is source IP address and the object IP address network in the same network segment of IP message, and described route network is the not network in the same network segment of the source IP address of IP message and object IP address; Wherein, between described net, interconnection agreement IP message is obtained from the interface filtration system of operating system by automatic topology discovery proxy module;

If the network type of described IP message is directly-connected network, described automatic topology discovery proxy module asks immediate answer to be surveyed to the object IP address of described IP message, obtains the first result of detection;

If the network type of described IP message is route network, described automatic topology discovery proxy module carries out route exploration to the object IP address of described IP message, to get the IP address of the router between local terminal and opposite end;

Described automatic topology discovery proxy module asks immediate answer to be surveyed to the object IP address of the IP address of described router, described IP message respectively, obtains the second result of detection;

Described automatic topology discovery proxy module reports described the first result of detection or described the second result of detection to discovering network topology Analysis server, so that described discovering network topology Analysis server is drawn network topological diagram after receiving described the first result of detection or described the second result of detection, described network topological diagram comprises the interconnect information between each network element device in network.

On the other hand, the automatic topology discovery method that the embodiment of the present invention provides, comprising:

Discovering network topology Analysis server receives the first result of detection or the second result of detection that each automatic topology discovery proxy module reports respectively, described the first result of detection is that the network type of interconnection agreement IP message between the net that obtains of automatic topology discovery proxy module is directly-connected network, automatic topology discovery proxy module asks immediate answer detection to obtain to the object IP address of described IP message, described the second result of detection is that the network type of the IP message that obtains of automatic topology discovery proxy module is route network, automatic topology discovery proxy module asks immediate answer detection to obtain to the IP address of the object IP address of described IP message and router, wherein, between described net, interconnection agreement IP message is obtained from the interface filtration system of operating system by automatic topology discovery proxy module,

The first result of detection or the second result of detection that described discovering network topology Analysis server reports respectively each automatic topology discovery proxy module are analyzed, draw out network topological diagram, described network topological diagram comprises the interconnect information between each network element device in network.

On the one hand, the automatic topology discovery proxy module that the embodiment of the present invention provides, comprising:

Acquiring unit, for obtaining the network type of interconnection agreement IP message between net, described network type comprises directly-connected network or route network, described directly-connected network is source IP address and the object IP address network in the same network segment of IP message, and described route network is the not network in the same network segment of the source IP address of IP message and object IP address; Wherein, between described net, interconnection agreement IP message is obtained from the interface filtration system of operating system by automatic topology discovery proxy module;

The first probe unit, if be directly-connected network for the network type of described IP message, asks immediate answer to be surveyed to the object IP address of described IP message, obtains the first result of detection;

The second probe unit, if be route network for the network type of described IP message, carries out route exploration to the object IP address of described IP message, to get the IP address of the router between local terminal and opposite end;

The 3rd probe unit, for asking immediate answer to be surveyed to the object IP address of the IP address of described router, described IP message respectively, obtains the second result of detection;

Report unit, for reporting described the first result of detection or described the second result of detection to discovering network topology Analysis server, so that described discovering network topology Analysis server is drawn network topological diagram after receiving described the first result of detection or described the second result of detection, described network topological diagram comprises the interconnect information between each network element device in network.

On the other hand, the discovering network topology Analysis server that the embodiment of the present invention provides, comprising:

Receiving element, for receiving the first result of detection or the second result of detection that each automatic topology discovery proxy module reports respectively, described the first result of detection is that the network type of interconnection agreement IP message between the net that obtains of automatic topology discovery proxy module is directly-connected network, automatic topology discovery proxy module asks immediate answer detection to obtain to the object IP address of described IP message, described the second result of detection is that the network type of the IP message that obtains of automatic topology discovery proxy module is route network, automatic topology discovery proxy module asks immediate answer detection to obtain to the IP address of the object IP address of described IP message and router, wherein, between described net, interconnection agreement IP message is obtained from the interface filtration system of operating system by automatic topology discovery proxy module,

Drawing unit, analyzes for the first result of detection or the second result of detection that each automatic topology discovery proxy module is reported respectively, draws out network topological diagram, and described network topological diagram comprises the interconnect information between each network element device in network.

As can be seen from the above technical solutions, the embodiment of the present invention has the following advantages:

In the embodiment of the present invention, automatic topology discovery proxy module utilization request immediate answer detection and route exploration, obtain the first result of detection or the second result of detection, and report to discovering network topology Analysis server, by discovering network topology Analysis server, draw out network topological diagram.By the technology of request immediate answer detection and route exploration, realized the automatic discovery of network topology, the special requirement of providing of the network equipment is not provided for it, automatically finds the network topology structure of IP system, and its highly versatile, can effectively implement.

Accompanying drawing explanation

Fig. 1 is embodiment schematic diagram of automatic topology discovery method of the present invention;

Fig. 2 is the schematic diagram that two nodes of automatic topology discovery method of the present invention send message;

Fig. 3 is application scenarios schematic diagram of automatic topology discovery method of the present invention;

Fig. 4 is another embodiment schematic diagram of automatic topology discovery method of the present invention;

Fig. 5 is the network topological diagram that automatic topology discovery method of the present invention is drawn out;

Fig. 6 is another network topological diagram that automatic topology discovery method of the present invention is drawn out;

Fig. 7 is another network topological diagram that automatic topology discovery method of the present invention is drawn out;

Fig. 8 is embodiment schematic diagram of automatic topology discovery proxy module of the present invention;

Fig. 9 is embodiment schematic diagram of discovering network topology Analysis server of the present invention;

Figure 10 is embodiment schematic diagram of topology discovery system for networks of the present invention.

Embodiment

For making goal of the invention of the present invention, feature, advantage can be more obvious and understandable, below in conjunction with the accompanying drawing in the embodiment of the present invention, technical scheme in the embodiment of the present invention is clearly and completely described, obviously, the embodiments described below are only the present invention's part embodiment, but not whole embodiment.Embodiment based in the present invention, the every other embodiment that those skilled in the art obtains, belongs to the scope of protection of the invention.

Embodiment of automatic topology discovery method of the present invention, automatic topology discovery proxy module in this embodiment is deployed on monitoring server, network management system (NMS, Element Management System) discovering network topology Analysis server of server deploy.Refer to Fig. 1, automatic topology discovery method of the present invention, comprising:

101, automatic topology discovery proxy module obtains the network type of interconnection agreement IP message between net.

Wherein, the network type of IP message comprises directly-connected network or route network, directly-connected network is source IP address and the object IP address network in the same network segment of IP message, and route network is the not network in the same network segment of the source IP address of IP message and object IP address.

In embodiments of the present invention, automatic topology discovery proxy module is deployed on monitoring server, in the interface filtration system of operating system, there is interconnection agreement (IP between net, Internet Protocol) message enters and flows out, and automatic topology discovery proxy module can obtain interconnection agreement IP message between net from the interface filtration system of operating system.

In embodiments of the present invention, the network type of the IP message in the interface filtration system of automatic topology discovery proxy module decision operation system is directly-connected network or route network, specifically can comprise:

A1, automatic topology discovery proxy module obtain object IP address and the source IP address of IP message.

A2, automatic topology discovery proxy module, according to the IP address of local terminal, get the mask corresponding to IP address of local terminal.

A3, automatic topology discovery proxy module carry out operation of bits with object IP address, source IP address respectively by mask, the operation of bits result that compares both, if both operation of bits come to the same thing, the network type of IP message is directly-connected network, otherwise the network type of IP message is route network.

In embodiments of the present invention, automatic topology discovery proxy module is according to object IP address and source IP address, and the network type of judgement IP message is directly-connected network or route network, judges that this IP message is to transmit in a network segment, or cross-network segment transmission.In embodiments of the present invention, the same network segment be labeled as directly-connected network, different segment is route network, route network is the not network in the same network segment of the source IP address of IP message and object IP address.

For example, object IP address in the IP message receiving is 120.17.233.1, source IP address is 120.17.233.2, the IP address of query manipulation system can obtain mask corresponding to this IP address, suppose that mask is 255.255.255.0, like this object IP and mask being carried out to operation of bits, to obtain destination network segment be 120.17.233.0, equally, source IP address 120.17.233.2 and mask are carried out to operation of bits, and to obtain the source network segment be 120.17.233.0, the reference source network segment and destination network segment, find that both are identical, so for the network type of this IP message is direct-connected networking.The object IP address of the IP message and for example receiving is 120.17.233.1, source IP address is 240.12.56.71, and in like manner obtaining destination network segment is 120.17.233.0, but the source network segment is 240.12.56.0, both are unequal, think that the network type of this IP message is route network.

It should be noted that, in embodiments of the present invention, automatic topology discovery proxy module also comprises obtain IP message from the interface filtration system of operating system after: automatic topology discovery proxy module, according to the port numbers of IP message, obtains the protocol type of IP message; Automatic topology discovery proxy module reports the protocol type of IP message to discovering network topology Analysis server.

It should be noted that, automatic topology discovery proxy module is according to the port numbers of IP message, the protocol type that obtains IP message can also comprise afterwards: automatic topology discovery proxy module is according to the difference of protocol type, statistic of classification is the message data flow under each agreement within the preset time period, then to discovering network topology Analysis server, report, by discovering network topology Analysis server, the message data flow information of each agreement within the preset time period is plotted on network topological diagram.

For example, automatic topology discovery proxy module can be added up in regular hour section, each IP message to the interface filtration system turnover of operating system carries out traffic statistics, after getting each protocol type, can carry out the statistic of classification of flow, within the time period of a setting, message data flow under http protocol is 27M, message data flow under DNS Protocol is 6M, message data flow under SSH agreement is 8M etc., after having added up, to discovering network topology Analysis server, report.

In actual applications, application layer protocol can judge by port numbers, and usually, port has has clearly stipulated the application layer protocol that uses, and for example, in network, well known port and protocol type are:

The Chinese full name of HTTP(HTTP is HTML (Hypertext Markup Language), and English full name is HyperText Transfer Protocol): port is 80.

The Chinese full name of DHCP(DHCP is that DynamicHost arranges agreement, and English full name is Dynamic Host Configuration Protocol): port is 67, is Dynamic Host Configuration Protocol server end.

DHCP: port is 68 is DHCP client-sides.

The Chinese full name of POP3(POP3 is Post Office Protocol,Version 3, and English full name is Post Office Protocol-Version3): port is 110.

The Chinese full name of SMTP(SMTP is Simple Mail Transfer protocol, and English full name is Simple Mail Transfer Protocol): port is 25.

The Chinese full name of Telnet(Telnet is communication network agreement, and English full name is Telecommunication Network Protocol): port is 23.

The Chinese full name of FTP(FTP is file transfer protocol (FTP), and English full name is File Transfer Protocol): the port that FTP is used has 20 and 21.20 ports are for transfer of data, and 21 ports are for the transmission of control signal.

The Chinese full name of TFTP(TFTP is TFTP, and English full name is Trivial File Transfer Protocol): port is 69.

The Chinese full name of DNS(DNS is domain name system, and English full name is Domain Name System): port is 53.

The Chinese full name of NetBIOS(NetBIOS is NetBIOS, and English full name is Network Basic Input Output System): port is 137,138,139.

The Chinese full name of NNTP(NNTP is NNTP, and English full name is Network News Transport Protocol): port is 119.

The Chinese full name of SNMP(SNMP is Simple Network Management Protocol, and English full name is Simple Network Management Protocol): port is 161.

The Chinese full name of RPC(RPC is remote procedure call protocol, and English full name is Remote Procedure Call Protocol): port is 135.

QQ: using port is 8000 and 4000, and wherein service end is 8000, and client is 4000.

The Bootstrap Protocol Server(boot protocol service end of Bootp service) and Bootstrap Protocol Client(bootstrap protocol client), port is 67,68.

Finger: port is 79.

The time delay of Metagram Relay(metagame) service: port is 99.

POP2(post office protocol version 2, Post Office Protocol Version2): port is 109.

RPC(Chinese full name is remote procedure call, and English full name is Remote Procedure Call): port is 111.

The Authentication Service(service for checking credentials): port is 113.

IMAP(Chinese full name is internet message access protocol, and English full name is Internet Message Access Protocol): port is 143.

HTTPS(Chinese full name is Secure Hypertext Transfer Protocol, and English full name is Hypertext Transfer Protocol over Secure Socket Layer): port is 443.

RTSP(Chinese full name is real-time streaming protocol, and English full name is Real Time Streaming Protocol): port is 554.

Reserved(retains): port is 1024.

Socks agency service: port is 1080.

MMS(Chinese full name is Microsoft Media Server, and English full name is Microsoft Media Server): port is 1755.

Remote desktop service: port is 3389 ports.

More than for example corresponding relation between port and protocol type has just been described, in actual applications, has also had other port and each self-corresponding protocol type, only as illustrative purposes herein, not as limiting.

It should be noted that, in embodiments of the present invention, automatic topology discovery proxy module can be made as following table 1, for describing the association attributes of each IP message after getting the object IP address, network type, protocol type of IP message.

Table 1 is automatic topology discovery proxy module to the relation table between the destination address of IP message, network type, protocol type:

Object IP address	Network type	Protocol type
			120.17.233.2	Directly-connected network	DNS，HTTP
120.17.233.5	Directly-connected network	NTP
			120.17.233.89	Directly-connected network	FTP，HTTP
240.12.56.71	Route network	HTTP
			81.23.211.90	Route network	SSH

If the network type of 102 IP messages is directly-connected network, automatic topology discovery proxy module asks immediate answer to be surveyed to the object IP address of IP message, obtains the first result of detection.

In embodiments of the present invention, network type from the IP message getting of step 101, if the network type of IP message is directly-connected network, the IP of automatic topology discovery proxy module and object IP are at consolidated network, automatic topology discovery proxy module asks immediate answer to be surveyed to object IP address, obtains the first result of detection.

In actual applications, automatic topology discovery proxy module specifically can carry out ICMP to object IP address and respond request (ICMP Ping) detection, obtains the first result of detection.Wherein, the first result of detection is specifically as follows: if receive ICMP, respond (ICMP Reply) message, the network between local terminal and opposite end connects normally, and showing has direct-connected topological line between local terminal and opposite end; If do not receive ICMP Reply message, the network between local terminal and opposite end is connected with variation, need to refresh the topology.

It should be noted that, it can be the cycle that automatic topology discovery proxy module carries out ICMP Ping to object IP address, and its detect cycle can be according to the requirement setting of the service quality of network topology link (QoS, Quality of Service).

It should be noted that, in embodiments of the present invention, automatic topology discovery proxy module asks also to comprise after immediate answer detection to the object IP address of IP message:

The request immediate answer message number that automatic topology discovery proxy module statistics sends in preset detect cycle and the response message number that receives opposite end feedback.

Automatic topology discovery proxy module, according to the response message number of request immediate answer message number and opposite end feedback, obtains the packet loss between local terminal and opposite end.

Automatic topology discovery proxy module reports packet loss to discovering network topology Analysis server.

For example, after step 102 automatic topology discovery proxy module carries out ICMP Ping detection to object IP address, can also comprise:

Automatic topology discovery proxy module statistics sends ICMP Ping message number and receives ICMP Reply message number in preset detect cycle;

Automatic topology discovery proxy module is multiplied by 100% by ICMP Reply number message divided by ICMP Ping message number, obtains the packet loss between local terminal and opposite end.

Automatic topology discovery proxy module reports described packet loss to discovering network topology Analysis server.

For example, each opposite end is surveyed repeatedly, as 20 times, if all receive response message, packet loss is 0%, if there are 2 to abandon, packet loss is 10%.

Automatic topology discovery proxy module obtains local terminal and sends request the time of immediate answer message and the time that local terminal receives the response message of opposite end feedback.

The time that automatic topology discovery proxy module receives the response message of opposite end feedback by local terminal deducts the time that local terminal sends request immediate answer message, obtains message round trip delay time.

Automatic topology discovery proxy module reports message round trip delay time to discovering network topology Analysis server.

For example, after automatic topology discovery proxy module carries out ICMP Ping detection to object IP address, can also comprise:

Automatic topology discovery proxy module obtains local terminal and sends the time of ICMP Ping message and the time that local terminal receives the ICMP Reply message of opposite end feedback.

The time that automatic topology discovery proxy module receives the ICMP Reply message of opposite end feedback by local terminal deducts the time that local terminal sends ICMP Ping message, obtains message round trip delay time.

For example, as shown in Figure 2, the time that node A sends ICMP Ping message for the first time to Node B is T1, and the time that node A receives the ICMP Reply message of Node B feedback is T3, message round trip delay time (RTD, Round-Trip Delay) RTD1=T3 – T1.As send for the first time the time of time record be 10: 22 323 milliseconds, the time that receives while replying be 10: 22 327 milliseconds, during o'clock 22 minutes 327 millis in round-trip delay=10 second – 10 22 minutes 323 milliseconds=5 milliseconds.

It should be noted that, automatic topology discovery proxy module obtains also comprising after message round trip delay time:

Automatic topology discovery proxy module calculates respectively and last time sent request the message delay of immediate answer message and this sends request the message delay of immediate answer message.

The message delay that automatic topology discovery proxy module sends request immediate answer message by this deducts the message delay that last time sends request immediate answer message, obtains the network jitter between local terminal and opposite end.

Automatic topology discovery proxy module is shaken to discovering network topology Analysis server report network.

For example, automatic topology discovery proxy module obtains also comprising after message round trip delay time:

Automatic topology discovery proxy module calculates respectively and last time sent the message delay of ICMP Ping message and the message delay of this transmission ICMP Ping message.

The message delay that automatic topology discovery proxy module sends ICMP Ping message by this deducts the message delay that last time sends ICMP Ping message, obtains the network jitter between local terminal and opposite end.

For example, as shown in Figure 2, the time that node A sends ICMP Ping message for the first time to Node B is T1, the time that node A receives the ICMP Reply message of Node B feedback is T3, the time that node A sends ICMP Ping message for the second time to Node B is T4, and the time that node A receives the ICMP Reply message of Node B feedback is T6.The message delay that sends for the first time message is T3 – T1, and the message delay that sends for the second time message is T6 – T4.Network jitter=(T6 – T4) – (T3 – T1).The time that for example sends for the first time ICMP request be 10: 22 323 milliseconds, receive reply be 10: 22 327 milliseconds, time delay is 5 milliseconds for the first time.The time that sends for the second time ICMP request be 10: 22 330 milliseconds, receive reply be 10: 22 338 milliseconds, time delay is 8 milliseconds for the second time.Network jitter is 5 milliseconds=3 milliseconds of 8 Hao Miao –.

If the network type of 103 IP messages is route network, automatic topology discovery proxy module carries out route exploration to the object IP address of IP message, to get the IP address of the router between local terminal and opposite end.

In embodiments of the present invention, got the network type of IP message by step 101 after, if the network type of IP message is route network, the IP of automatic topology discovery proxy module and object IP be not at consolidated network, automatic topology discovery proxy module carries out route exploration to object IP address and is specifically as follows automatic topology discovery proxy module and traceroute (TraceRoute) is carried out in object IP address surveys, to get the IP address of the router between local terminal and opposite end.

The implementation of application TraceRoute is: first automatic topology discovery proxy module sends a life span (TTL to destination host, Time To Live) be 1 IP packet, the first jumping routing device on path subtracts 1 by TTL while receiving this packet, and whether the TTL that checks this packet is 0, if 0, by data packet discarding and to automatic topology discovery proxy module, send it back an ICMP error message, if be not 0, continue to forward this packet.Because the TTL of packet now becomes 0, therefore this first jumping routing device can be by data packet discarding, and send it back an ICMP error message and can not be sent out because TTL is overtime to indicate this packet, wherein ICMP error message is to send by the overtime error message of ICMP.Automatic topology discovery proxy module resends the IP packet that a TTL is 2 afterwards, and same second jumps routing device receives after packet and to indicate the overtime and ICMP error message that can not be sent out of TTL by returning to one.This process is constantly carried out, until arrive destination host.The object of carrying out these processes is to record the source address of the overtime error message of each ICMP, to provide an IP packet to arrive the path that destination host was experienced.When finally receiving the ICMP response message of destination host response, the network of explanation from source host to destination host is communicated with, and according to the overtime error message source address of the ICMP of above-mentioned record, can know between source, destination host and cross over which gateway device, get the IP address of the router between local terminal and opposite end.

104, automatic topology discovery proxy module asks immediate answer to be surveyed to the object IP address of the IP address of router, IP message, obtains the second result of detection.

In embodiments of the present invention, after obtaining the IP address of the whole routers between local terminal and opposite end in situation that network is connected to route network in step 103, automatic topology discovery proxy module asks immediate answer to be surveyed to the IP address of the IP address of each router and opposite end, obtains the second result of detection.

Wherein, automatic topology discovery proxy module carries out ICMP Ping detection to the object IP address of the IP address of router, IP message, the second result of detection is specifically as follows: if receive the ICMP Reply message of router feedback, the network between local terminal and this router connects normal, if do not receive the ICMP Reply message of router feedback, the network between local terminal and this router is connected with variation; If receive the ICMP Reply message of opposite end feedback, the network between local terminal and opposite end connects normally, if do not receive the ICMP Reply message of opposite end feedback, the network between local terminal and opposite end is connected with variation.

For example, by step 103, the IP address that has obtained router is respectively R1:210.9.34.1, R2:32.223.43.1, R3:76.52.31.4, opposite end main frame Host:100.4.1.43.Automatic topology discovery proxy module starts each router and opposite end main frame to carry out ICMP Ping detection, obtains the second result of detection.

In order to describe step 102 in detail to the implementation procedure of step 104, refer to the interaction diagrams shown in Fig. 3, take and between automatic topology discovery proxy module and opposite end main frame, be connected with altogether two router devices (being specially router-A and router B) and describe as example.

If 301 network types are directly-connected network, automatic topology discovery proxy module carries out ICMP Ping detection to local terminal main frame, and receives the ICMP Reply message that local terminal main frame returns.

If 302 network types are route network, automatic topology discovery proxy module carries out TraceRoute detection to opposite end main frame, get between automatic topology discovery proxy module and opposite end main frame and be connected with two routers, be respectively router-A and router B.

303, automatic topology discovery proxy module carries out ICMP Ping detection to router-A, and receives the ICMP Reply message that router-A returns.

304, automatic topology discovery proxy module carries out ICMP Ping detection to router B, and receives the ICMP Reply message that router B returns.

305, automatic topology discovery proxy module carries out ICMP Ping detection to opposite end main frame, and receives the ICMP Reply message that opposite end main frame returns.

It should be noted that, in Fig. 3, take and between automatic topology discovery proxy module and opposite end main frame, be connected with altogether two router devices and describe as example, in actual applications, the number of the concrete router device connecting can be surveyed and be obtained by TraceRoute, herein for illustrative purposes only, do not limit.

It should be noted that, the first result of detection of describing in the step 102 of the embodiment of the present invention is a kind of result of detection in fact, the second result of detection of describing in subsequent step 104 is in addition also a kind of result of detection, in step 102 why called after the first result of detection just for subsequent step 104 in the second result of detection of occurring distinguish, its " first " and " second " do not have any relation in sequential or in logic, when there is the first result of detection, not to occur the second result of detection, certainly when there is the second result of detection, neither there is the first result of detection, only in order to represent it is respectively two different result of detections.Certainly in order to distinguish the result of detection occurring respectively in step 102 and step 104, can also adopt other naming method, as long as can represent that this result of detection is two different result of detections, for example, can distinguish called after result of detection a and result of detection b etc.

105, automatic topology discovery proxy module reports the first result of detection or the second result of detection to discovering network topology Analysis server, so that discovering network topology Analysis server is drawn network topological diagram after receiving the first result of detection or the second result of detection.

Wherein, network topological diagram comprises the interconnect information between each network element device in network.

In embodiments of the present invention, after automatic topology discovery proxy module obtains the first result of detection or the second result of detection, to discovering network topology Analysis server, report, so that discovering network topology Analysis server is drawn network topological diagram after receiving the first result of detection or the second result of detection.

Next, refer to shown in Fig. 4, the automatic topology discovery method that the embodiment of the present invention provides, comprising:

401, discovering network topology Analysis server receives the first result of detection or the second result of detection that each automatic topology discovery proxy module reports respectively.

Wherein, the first result of detection is that the network type of interconnection agreement IP message between the net that obtains of automatic topology discovery proxy module is that directly-connected network, automatic topology discovery proxy module ask immediate answer to be surveyed to the object IP address of IP message to obtain.The second result of detection is that the network type of the IP message that obtains of automatic topology discovery proxy module is that route network, automatic topology discovery proxy module ask immediate answer to be surveyed to the IP address of the object IP address of IP message and router to obtain.

In embodiments of the present invention, discovering network topology Analysis server receives the first result of detection separately or the second result of detection that each automatic topology discovery proxy module reports respectively, wherein automatic topology discovery proxy module obtains the first result of detection or the second result of detection refers to the embodiment shown in Fig. 1, repeats no more herein.

402, discovering network topology Analysis server to each automatic topology discovery proxy module report respectively the first result of detection or the second result of detection analyze, draw out network topological diagram.

In embodiments of the present invention, be deployed in discovering network topology Analysis server on NMS server after receiving the first result of detection or the second result of detection that each automatic topology discovery proxy module reports, the first result of detection or the second result of detection that each automatic topology discovery proxy module is reported are analyzed, and draw out network topological diagram.If the first result of detection or the second result of detection that each automatic topology discovery proxy module reports exist redundancy, discovering network topology Analysis server is deleted the result of detection of redundancy, draws out network topological diagram.

For example: discovering network topology Analysis server is collected local host Host1 and to the path of destination host Host2 is: Host1:102.11.21.33, Route1:102.11.21.1, Route2:12.3.41.76, destination host Host2:32.4.34.56.Local host Host1 to the path of destination host 2 is: Host1:102.11.21.33, Route1:102.11.21.1, Route3:56.53.2.1, Host3:78.6.42.5.Data between comprehensively analyzing at its 2, delete the wherein node data of redundancy, as: local host Host1, to the duplicate paths of router Route1:102.11.21.1, draws out complete network topological diagram, as shown in Figure 5.

It should be noted that, before step 402, can also further comprise:

Discovering network topology Analysis server receives the protocol type of the IP message that each automatic topology discovery proxy module reports.

After discovering network topology Analysis server receives the protocol type of the IP message that automatic topology discovery proxy module reports, the protocol type that discovering network topology Analysis server is different according to each, draws out respectively network topological diagram.

For example, in the table 1 providing according to the embodiment of the present invention, the corresponding relation that has each object IP address and protocol type, the protocol type that discovering network topology Analysis server can need to present according to user's selection and draw out separately network topological diagram, as user need to present the network topology that agreement is HTTP, discovering network topology Analysis server only need to be drawn the network topological diagram of HTTP when drawing network topological diagram.

It should be noted that, in embodiments of the present invention, after discovering network topology Analysis server receives the protocol type of the IP message that each automatic topology discovery proxy module reports, can also comprise:

Discovering network topology Analysis server receives the message data flow under each protocol type within the preset time period that each automatic topology discovery proxy module reports.

After discovering network topology Analysis server receives the protocol type of the IP message that automatic topology discovery proxy module reports, the protocol type that discovering network topology Analysis server is different according to each, is plotted in the message data flow under each protocol type in the preset time period on network topological diagram respectively.

During discovering network topology Analysis server statistics, also according to its application layer protocol type, add up, can on superincumbent agreement topological diagram, present topological diagram corresponding to agreement, the management and supervision network that can more become more meticulous like this.

It should be noted that, before step 402, can also further comprise the steps at least one step in S1, step S2, step S3:

S1, discovering network topology Analysis server receive the packet loss that each automatic topology discovery proxy module reports.

S2, discovering network topology Analysis server receive the message round trip delay time that each automatic topology discovery proxy module reports.

S3, discovering network topology Analysis server receive the network jitter that each automatic topology discovery proxy module reports.

Discovering network topology Analysis server is drawn out network topological diagram and is specially: at least one in the packet loss that discovering network topology Analysis server receives at least one step by step S1, step S2, step S3, message round trip delay time, network jitter is plotted on network topological diagram.Its implication is: if discovering network topology Analysis server has been carried out step S1, discovering network topology Analysis server is plotted in the packet loss receiving in step S1 in network diagram.If discovering network topology Analysis server has been carried out step S2, discovering network topology Analysis server is plotted in the message round trip delay time receiving in step S2 in network diagram.If discovering network topology Analysis server has been carried out step S3, discovering network topology Analysis server is plotted in the network jitter receiving in step S3 in network diagram.If it is S1 and S2 that discovering network topology Analysis server has been carried out step, discovering network topology Analysis server is plotted in the packet loss receiving and message round-trip delay in network diagram.If it is S1 and S3 that discovering network topology Analysis server has been carried out step, discovering network topology Analysis server is plotted in the packet loss receiving and network jitter in network diagram.If it is S2 and S3 that discovering network topology Analysis server has been carried out step, when discovering network topology Analysis server comes and goes the message receiving and network jitter prolong and be plotted in network diagram.If it is S1, S2 and S3 that discovering network topology Analysis server has been carried out step, when discovering network topology Analysis server comes and goes the packet loss receiving, message and network jitter prolong and be plotted in network diagram.

For example, within the time period of 5 minutes of a setting, after discovering network topology Analysis server receives the result of detection that Host1, Host2, Host3, Host4, Host5, Route report separately, can draw out network topological diagram, and can draw respectively network topological diagram according to different agreements, as shown in Figure 6, within the time period of 5 minutes of a setting, the message data flow that http protocol produces is altogether 6M, and the bandwidth average of the http protocol within the time period of 5 minutes is 6 * 8 ÷ 300Mbps=0.16Mbps.Message delay between Host1 and Host2 is 10ms, and packet loss is 1%.Message delay between Host2 and Host3 is 5ms, and packet loss is 1%.Message delay between Host2 and Route is 2ms, and packet loss is 0%.Message delay between Host4 and Route is 1ms, and packet loss is 1%.Message delay between Host5 and Route is 1ms, and packet loss is 1%.The application layer protocol of take describes as HTTP as example, can draw out separately the network topological diagram that uses http protocol.In the figure, the information such as the packet loss reporting by the automatic topology discovery proxy module on each node, time delay, bandwidth average can be embodied in network topological diagram, to realize management and the monitoring to network more becoming more meticulous.

Again for example, within the time period of 10 minutes of a setting, after discovering network topology Analysis server receives the result of detection that Host1, Host2, Host3, Route report separately, can draw out network topological diagram, and can draw respectively network topological diagram according to different agreements, as shown in Figure 7, within the time period of 10 minutes of a setting, the message data flow that File Transfer Protocol produces is altogether 25M, and the bandwidth average of the File Transfer Protocol within the time period of 10 minutes is 25 * 8 ÷ 600Mbps=0.33Mbps.Message delay between Host1 and Host2 is 30ms, and packet loss is 3%.Message delay between Host2 and Route is 10ms, and packet loss is 1%.Message delay between Host3 and Route is 1ms, and packet loss is 1%.The application layer protocol of take describes as FTP as example, can draw out separately the network topological diagram that uses File Transfer Protocol.In the figure, the information such as the packet loss reporting by the automatic topology discovery proxy module on each node, time delay, bandwidth average can be embodied in network topological diagram, to realize management and the monitoring to network more becoming more meticulous.

Above embodiment has introduced the automatic topology discovery method that the embodiment of the present invention provides, and next refers to shown in Fig. 8, and the automatic topology discovery proxy module 800 that the embodiment of the present invention provides, comprising:

Acquiring unit 801, for obtaining the network type of IP message, network type comprises directly-connected network or route network, directly-connected network is source IP address and the object IP address network in the same network segment of IP message, and route network is the not network in the same network segment of the source IP address of IP message and object IP address.

The first probe unit 802, if be directly-connected network for the network type of IP message, asks immediate answer to be surveyed to the object IP address of IP message, obtains the first result of detection.

The second probe unit 803, if be route network for the network type of IP message, carries out route exploration to the object IP address of IP message, to get the IP address of the router between local terminal and opposite end.

The 3rd probe unit 804, for asking immediate answer to be surveyed to the object IP address of the IP address of router, IP message respectively, obtains the second result of detection.

Report unit 805, for reporting the first result of detection or the second result of detection to discovering network topology Analysis server, so that discovering network topology Analysis server is drawn network topological diagram after receiving the first result of detection or the second result of detection, network topological diagram comprises the interconnect information between each network element device in network.

It should be noted that, in actual applications, for acquiring unit 801, a kind of attainable mode is that acquiring unit 801 is specifically for obtaining object IP address and the source IP address of IP message; According to the IP address of local terminal, get the mask corresponding to IP address of local terminal; Mask is carried out to operation of bits with object IP address, source IP address respectively, compare both operation of bits results, if both operation of bits come to the same thing, the network type of IP message is directly-connected network, otherwise the network type of IP message is route network.

It should be noted that, in actual applications, for acquiring unit 801 with report for unit 805, a kind of attainable mode is that acquiring unit 801 also, for according to the port numbers of IP message, obtains the protocol type of IP message.

Report unit 805, also for report the protocol type of IP message to discovering network topology Analysis server.

It should be noted that, in actual applications, for acquiring unit 801 with report for unit 805, another kind of attainable mode is, acquiring unit 801, also for according to the difference of protocol type, statistic of classification is the message data flow under each agreement within the preset time period.

Report unit 805, also for report the message data flow under each agreement within the preset time period to discovering network topology Analysis server.

It should be noted that, in actual applications, for acquiring unit 801 with report for unit 805, another kind of attainable mode is that acquiring unit 801 is also for adding up the request immediate answer message number sending in preset detect cycle and the response message number that receives opposite end feedback; According to the response message number of request immediate answer message number and opposite end feedback, obtain the packet loss between local terminal and opposite end.

Report unit 805, also for reporting packet loss to discovering network topology Analysis server.

It should be noted that, in actual applications, for acquiring unit 801 with report for unit 805, another kind of attainable mode is that acquiring unit 801 also sends request the time of immediate answer message and the time that local terminal receives the response message of opposite end feedback for obtaining local terminal; The time that local terminal is received to the response message of opposite end feedback deducts the time that local terminal sends request immediate answer message, obtains message round trip delay time.

Report unit 805, also for reporting message round trip delay time to discovering network topology Analysis server.

It should be noted that, in actual applications, for acquiring unit 801 with report for unit 805, another kind of attainable mode is, acquiring unit 801, the message delay that also last time sends request immediate answer message for calculating respectively sends request the message delay of immediate answer message with this; The message delay that this is sent request to immediate answer message deducts the message delay that last time sends request immediate answer message, obtains the network jitter between local terminal and opposite end.

Report unit 805, also for shaking to discovering network topology Analysis server report network.

It should be noted that, the contents such as the information interaction between each module/unit of said apparatus, implementation, due to the inventive method embodiment based on same design, its technique effect bringing is identical with the inventive method embodiment, particular content can, referring to the narration in the present invention's embodiment of the method as shown in Figure 1, repeat no more herein.

Next introduce the discovering network topology Analysis server that the embodiment of the present invention provides, refer to shown in Fig. 9, discovering network topology Analysis server 900, comprising:

Receiving element 901, the first result of detection or the second result of detection that for receiving each automatic topology discovery proxy module, report respectively.The first result of detection is that to be directly-connected network, automatic topology discovery proxy module carry out ICMP to the object IP address of IP message to the network type of interconnection agreement IP message between the net that obtains of automatic topology discovery proxy module responds request request immediate answer and survey and obtain.The second result of detection is that the network type of the IP message that obtains of automatic topology discovery proxy module is that route network, automatic topology discovery proxy module ask immediate answer to be surveyed to the IP address of the object IP address of IP message and router to obtain, and network topological diagram comprises the interconnect information between each network element device in network.

Drawing unit 902, analyzes for the first result of detection reporting respectively or the second result of detection to each automatic topology discovery proxy module, draws out network topological diagram, and network topological diagram comprises the interconnect information between each network element device in network.

It should be noted that, in actual applications, for receiving element 901 and drawing unit 902, a kind of attainable mode is, receiving element 901 is also for receiving the protocol type of the IP message that each automatic topology discovery proxy module reports.

Drawing unit 902, specifically for the protocol type different according to each, draws out respectively network topological diagram.

It should be noted that, in actual applications, for receiving element 901 and drawing unit 902, another kind of attainable mode is, receiving element 901, the message data flow under each protocol type within the preset time period also reporting for receiving each automatic topology discovery proxy module.

Drawing unit 902, specifically for the protocol type different according to each, is plotted in the message data flow under each protocol type in the preset time period on network topological diagram respectively.

It should be noted that, in actual applications, for receiving element 901 and drawing unit 902, another kind of attainable mode is, receiving element is also for receiving at least one of packet loss that each automatic topology discovery proxy module reports, message round trip delay time, network jitter.

Drawing unit 902, is plotted on network topological diagram specifically at least one in packet loss that receiving element 901 is received, message round trip delay time, network jitter.

It should be noted that, the contents such as the information interaction between each module/unit of said apparatus, implementation, due to the inventive method embodiment based on same design, its technique effect bringing is identical with the inventive method embodiment, particular content can, referring to the narration in the present invention's embodiment of the method as shown in Figure 4, repeat no more herein.

Above embodiment has introduced automatic topology discovery proxy module and discovering network topology Analysis server that the embodiment of the present invention provides, next, refers to Figure 10, and the topology discovery system for networks 1000 that the embodiment of the present invention provides, comprising:

Automatic topology discovery proxy module 1001 and discovering network topology Analysis server 1002.

Wherein, automatic topology discovery proxy module 1001 implementations refer to as shown in Figure 8, repeat no more herein.Discovering network topology Analysis server 1002 implementations refer to as shown in Figure 9, repeat no more herein.

It should be noted that; in actual applications; discovering network topology Analysis server 1002 can be connected with a plurality of automatic topology discovery proxy modules 1001 conventionally; each automatic topology discovery proxy module 1001 independently reports result of detection to discovering network topology Analysis server 1002; 1 automatic topology discovery proxy module 1001 has been shown in Figure 10; but in actual applications; the concrete automatic topology discovery proxy module number connecting is determined by concrete application scenarios; be example herein, do not limit.

In the topology discovery system for networks that the embodiment of the present invention provides, automatic topology discovery proxy module utilization request immediate answer detection and route exploration, obtain the first result of detection or the second result of detection, and report to discovering network topology Analysis server, by discovering network topology Analysis server, draw out network topological diagram.By the technology of request immediate answer detection and route exploration, realized the automatic discovery of network topology, the special requirement of providing of the network equipment is not provided for it, automatically finds the network topology structure of IP system, and its highly versatile, can effectively implement.

One of ordinary skill in the art will appreciate that all or part of step realizing in above-described embodiment method is to come the hardware that instruction is relevant to complete by program, described program can be stored in a kind of computer-readable recording medium, the above-mentioned storage medium of mentioning can be read-only memory, disk or CD etc.

Above automatic topology discovery method provided by the present invention, Apparatus and system are described in detail, for one of ordinary skill in the art, thought according to the embodiment of the present invention, all will change in specific embodiments and applications, in sum, this description should not be construed as limitation of the present invention.

Claims

1. an automatic topology discovery method, is characterized in that, comprising:

2. automatic topology discovery method according to claim 1, is characterized in that, described method also comprises:

Described automatic topology discovery proxy module, according to the port numbers of described IP message, obtains the protocol type of described IP message;

Described automatic topology discovery proxy module reports the protocol type of described IP message to described discovering network topology Analysis server.

3. automatic topology discovery method according to claim 2, is characterized in that, described method also comprises:

Described automatic topology discovery proxy module is according to the difference of protocol type, and statistic of classification is the message data flow under each agreement within preset time period, then to described discovering network topology Analysis server, reports.

4. according to the automatic topology discovery method described in any one in claims 1 to 3, it is characterized in that, described automatic topology discovery proxy module asks also to comprise after immediate answer detection to the object IP address of described IP message:

The request immediate answer message number that described automatic topology discovery proxy module statistics sends in preset detect cycle and the response message number that receives opposite end feedback;

Described automatic topology discovery proxy module, according to the response message number of described request immediate answer message number and described opposite end feedback, obtains the packet loss between local terminal and opposite end;

Described automatic topology discovery proxy module reports described packet loss to discovering network topology Analysis server.

5. according to the automatic topology discovery method described in any one in claims 1 to 3, it is characterized in that, described automatic topology discovery proxy module asks also to comprise after immediate answer detection to the object IP address of described IP message:

Described automatic topology discovery proxy module obtains local terminal and sends request the time of immediate answer message and the time that local terminal receives the response message of opposite end feedback;

The time that described automatic topology discovery proxy module receives the response message of opposite end feedback by local terminal deducts the time that local terminal sends request immediate answer message, obtains message round trip delay time;

Described automatic topology discovery proxy module reports described message round trip delay time to discovering network topology Analysis server.

6. automatic topology discovery method according to claim 5, is characterized in that, described method also comprises:

Described automatic topology discovery proxy module calculates respectively and last time sent request the message delay of immediate answer message and this sends request the message delay of immediate answer message;

The message delay that described automatic topology discovery proxy module sends request immediate answer message by this deducts the message delay that last time sends request immediate answer message, obtains the network jitter between local terminal and opposite end;

Described automatic topology discovery proxy module reports described network jitter to discovering network topology Analysis server.

7. according to the automatic topology discovery method described in any one in claims 1 to 3, it is characterized in that, the network type that described automatic topology discovery proxy module obtains interconnection agreement IP message between net comprises:

Described automatic topology discovery proxy module obtains object IP address and the source IP address of described IP message;

Described automatic topology discovery proxy module, according to the IP address of local terminal, obtains the mask corresponding to IP address of described local terminal;

Described automatic topology discovery proxy module carries out operation of bits with described object IP address, described source IP address respectively by described mask, the operation of bits result that compares both, if both operation of bits come to the same thing, the network type of described IP message is directly-connected network, otherwise the network type of described IP message is route network.

8. according to automatic topology discovery method described in any one in claims 1 to 3, it is characterized in that, described automatic topology discovery proxy module asks immediate answer detection to be specially to the object IP address of described IP message: described automatic topology discovery proxy module carries out ICMP to the object IP address of described IP message and responds request ICMP Ping detection, described the first result of detection is: if receive ICMP, respond ICMP Reply message, the network between local terminal and opposite end connects normal; If do not receive ICMP Reply message, the network between local terminal and opposite end is connected with variation.

9. according to the automatic topology discovery method described in any one in claims 1 to 3, it is characterized in that, described automatic topology discovery proxy module carries out route exploration to the object IP address of described IP message and is specially: described automatic topology discovery proxy module carries out traceroute TraceRoute detection to the object IP address of described IP message, described the second result of detection is: if receive the ICMP Reply message of described router feedback, the network between local terminal and described router connects normal, if do not receive the ICMP Reply message of described router feedback, the network between local terminal and described router is connected with variation, if receive the ICMP Reply message of opposite end feedback, the network between local terminal and described opposite end connects normally, if do not receive the ICMP Reply message of opposite end feedback, the network between local terminal and opposite end is connected with variation.

10. an automatic topology discovery method, is characterized in that, comprising:

11. automatic topology discovery methods according to claim 10, is characterized in that, described discovering network topology Analysis server also comprises before drawing out network topological diagram:

Described discovering network topology Analysis server receives the protocol type of the IP message that each automatic topology discovery proxy module reports;

Described discovering network topology Analysis server is drawn out network topological diagram and is specially: the protocol type that described discovering network topology Analysis server is different according to each, draw out respectively network topological diagram.

12. automatic topology discovery methods according to claim 11, is characterized in that, described discovering network topology Analysis server also comprises after receiving the protocol type of the IP message that each automatic topology discovery proxy module reports:

Described discovering network topology Analysis server receives the message data flow under each protocol type within the preset time period that each automatic topology discovery proxy module reports;

Described discovering network topology Analysis server is drawn out network topological diagram and is specially: the protocol type that described discovering network topology Analysis server is different according to each, is plotted in the message data flow under each protocol type in the preset time period on network topological diagram respectively.

13. automatic topology discovery methods according to claim 10, is characterized in that, described discovering network topology Analysis server is drawn out network topological diagram and also comprised the steps at least one step in S1, step S2, step S3 before:

S1, described discovering network topology Analysis server receive the packet loss that each automatic topology discovery proxy module reports;

S2, described discovering network topology Analysis server receive the message round trip delay time that each automatic topology discovery proxy module reports;

S3, described discovering network topology Analysis server receive the network jitter that each automatic topology discovery proxy module reports;

Described discovering network topology Analysis server is drawn out network topological diagram and is specially: the described packet loss that described discovering network topology Analysis server receives at least one step by step S1, step S2, step S3, described message round trip delay time, described network jitter are plotted on network topological diagram.

14. 1 kinds of automatic topology discovery proxy modules, is characterized in that, comprising:

15. automatic topology discovery proxy modules according to claim 14, is characterized in that,

Described acquiring unit, also, for according to the port numbers of described IP message, obtains the protocol type of described IP message;

The described unit that reports, also for reporting the protocol type of described IP message to discovering network topology Analysis server.

16. automatic topology discovery proxy modules according to claim 15, is characterized in that,

Described acquiring unit, also for according to the difference of protocol type, statistic of classification is the message data flow under each agreement within the preset time period;

The described unit that reports, also for reporting the message data flow under each agreement within the preset time period to discovering network topology Analysis server.

17. according to claim 14 to the automatic topology discovery proxy module described in any one in 16, it is characterized in that,

Described acquiring unit, also for adding up the request immediate answer message message number sending in preset detect cycle and the response message number that receives opposite end feedback; According to the response message number of described request immediate answer message number and described opposite end feedback, obtain the packet loss between local terminal and opposite end;

The described unit that reports, also for reporting described packet loss to discovering network topology Analysis server.

18. according to claim 14 to the automatic topology discovery proxy module described in any one in 16, it is characterized in that,

Described acquiring unit, also sends request the time of immediate answer message and the time that local terminal receives the response message of opposite end feedback for obtaining local terminal; The time that local terminal is received to the response message of opposite end feedback deducts the time that local terminal sends request immediate answer message, obtains message round trip delay time;

The described unit that reports, also for reporting described message round trip delay time to discovering network topology Analysis server.

19. according to claim 14 to the automatic topology discovery proxy module described in any one in 16, it is characterized in that,

Described acquiring unit, the message delay that also last time sends request immediate answer message for calculating respectively sends request the message delay of immediate answer message with this; The message delay that this is sent request to immediate answer message deducts the message delay that last time sends request immediate answer message, obtains the network jitter between local terminal and opposite end;

The described unit that reports, also for reporting described network jitter to discovering network topology Analysis server.

20. according to claim 14 to the automatic topology discovery proxy module described in any one in 16, it is characterized in that,

Described acquiring unit, specifically for obtaining object IP address and the source IP address of described IP message; According to the IP address of local terminal, obtain the mask corresponding to IP address of described local terminal; Described mask is carried out to operation of bits with described object IP address, described source IP address respectively, the operation of bits result that compares both, if both operation of bits come to the same thing, the network type of described IP message is directly-connected network, otherwise the network type of described IP message is route network.

21. 1 kinds of discovering network topology Analysis servers, is characterized in that, comprising:

22. discovering network topology Analysis servers according to claim 21, is characterized in that,

Described receiving element, also for receiving the protocol type of the IP message that each automatic topology discovery proxy module reports;

Described drawing unit, specifically for the protocol type different according to each, draws out respectively network topological diagram.

23. discovering network topology Analysis servers according to claim 22, is characterized in that,

Described receiving element, the message data flow under each protocol type within the preset time period also reporting for receiving each automatic topology discovery proxy module;

Described drawing unit, specifically for the protocol type different according to each, is plotted in the message data flow under each protocol type in the preset time period on network topological diagram respectively.

24. according to the discovering network topology Analysis server described in any one in claim 21 to 23, it is characterized in that,

Described receiving element, also for receiving at least one of packet loss that each automatic topology discovery proxy module reports, message round trip delay time, network jitter;

Described drawing unit, is plotted on network topological diagram specifically at least one in the described packet loss that described receiving element is received, described message round trip delay time, described network jitter.

25. 1 kinds of topology discovery system for networks, is characterized in that, comprising: the automatic topology discovery proxy module as described in claim 14 to 20, the discovering network topology Analysis server as described in claim 21 to 24.